QbyteLab

Key takeaways

• A no-custody crypto app reads public addresses to show balances and prices, and it never has the private keys needed to move your funds.
• Custodial exchanges control your keys, which means they can freeze withdrawals, fail in bankruptcy, or leak your KYC data in a breach.
• Watch-only tracking works from a public address alone, so you can monitor a full portfolio without any login or seed phrase.
• Before installing any tracker, confirm it asks only for public addresses and never requests a private key, seed phrase, or exchange password.

A crypto app with no custody watches your holdings using public addresses alone, and it never touches the private keys that control your coins. That single design choice separates a tool that can only look at your funds from a service that can move, freeze, or lose them. If you are comparing trackers and want to monitor prices and a full portfolio without handing anything sensitive to a third party, the distinction below is the one that matters before you install.

This guide explains what "no custody" really means, how watch-only tools differ from custodial exchanges, the concrete risks of letting someone else hold your keys, and a short checklist to test any app's claims for yourself.

What "No Custody" Actually Means

Custody in crypto comes down to one question: who holds the private keys? Whoever holds the keys can spend the coins. Everything else is detail.

There are three things an app might hold, and it helps to separate them:

• Your keys. The private key or seed phrase that authorizes spending. A no-custody app never has this.
• Your coins. The actual on-chain balance. If an app holds your keys, it effectively holds your coins too.
• Your data. Your identity documents, email, and the link between you and your addresses.

A crypto app with no custody sits at the far end of this spectrum. You give it a public address, the kind you share to receive a payment, and it reads the blockchain to show what that address holds. A public address is safe to share by design. It can reveal a balance, but it can never authorize a transaction. That is why a watch-only tracker can display your portfolio down to the satoshi while remaining physically incapable of moving a single coin.

The reason this matters is simple. When you do not hand over keys, there is nothing for an attacker to steal from the app, nothing for the company to freeze, and nothing to lose if the business shuts down.

Custodial Exchanges vs Non-Custodial, Watch-Only Tools

The word "wallet" gets used for two opposite things, which is where most confusion starts.

A custodial service, such as a centralized exchange, holds the keys on your behalf. You log in with an email and password, you see a balance in a dashboard, and you trust the company to honor a withdrawal when you ask. What you own is a claim against that company, not the coins directly. This is the same relationship you have with a bank, except the protections that come with a bank are mostly absent.

A non-custodial wallet puts the keys on your own device. You control spending, and no company can freeze or seize the funds. The trade-off is responsibility: lose the seed phrase and the coins are gone.

A watch-only tracker is a third category and the focus of this article. It holds no keys at all. You enter one or more public addresses, and the app reports balances, transaction history, and current market value. It cannot spend, and it does not need to, because its only job is to show you what is already visible on the public ledger.

Bitcoin's own design assumes this separation. The original Bitcoin whitepaper describes the network as a public chain of transactions that anyone can verify, which is exactly what makes read-only tracking possible without any special access. The ledger was built to be openly auditable from the start, so watching an address requires nothing more than the address itself.

The Real Risks of Custody

Handing your keys to a third party concentrates several risks that watch-only tools avoid entirely.

Exchange failure and theft. When a custodian holds billions in customer funds, it becomes a target and a single point of failure. According to Chainalysis, hackers stole approximately $2.2 billion in cryptocurrency during 2024, much of it from centralized services that held customer keys. The pace has not slowed: Chainalysis figures cited by Recorded Future News show $2.17 billion stolen in the first half of 2025 alone, with the single Bybit hack accounting for 69% of those losses. Every dollar in those totals sat under someone else's custody at the moment it was taken.

Frozen withdrawals and insolvency. A custodial platform can pause withdrawals during stress, and if it becomes insolvent, your claim joins a bankruptcy queue. Collapses like FTX left customers waiting years to recover a fraction of what they were owed. A watch-only app has no withdrawal button to freeze, because there was never anything on deposit.

KYC data leaks and honeypot databases. To hold funds legally, exchanges collect identity documents, addresses, and photos. That stockpile becomes a honeypot. A breach can expose not only your identity but the fact that you hold crypto, which invites targeted phishing and physical risk. Broader fraud data underlines the scale of the problem: the FBI's Internet Crime Complaint Center reported that Americans lost $9.32 billion to cryptocurrency-related fraud in 2024, a category built substantially on stolen credentials and social engineering that custodial accounts make possible.

A tool that never collects your identity and never holds your keys removes itself from all three of these failure modes.

How a Crypto App With No Custody Tracks a Full Portfolio

You do not need a login or a private key to watch a portfolio. Everything a tracker needs is already public.

Here is how read-only tracking works in practice:

1. Copy your public address. From your hardware wallet or self-custody wallet, copy the receiving address for each asset you want to watch. This is the same string you would send to someone paying you.
2. Add addresses to the tracker. Paste each public address into the app. You can group several under one portfolio to see combined value.
3. Read the on-chain balance. The app queries the blockchain and displays the current balance and transaction history for each address.
4. Overlay live prices. The tracker multiplies each balance by a current market price to show fiat value, and it can alert you when a price crosses a threshold you set.
5. Export a report. Because the data is read from a public ledger, you can export a clean statement for records or taxes without exposing any secret.

At no point does this flow ask for a private key, a seed phrase, or an exchange password. If an app requests any of those to "track" your balance, it is asking for spending power it does not need.

A Checklist for Evaluating Custody and Privacy Claims

Before you install any crypto app, run it through these questions. Honest answers separate a genuine watch-only tool from a custodial service wearing tracker clothing.

• Does it ask for a private key or seed phrase? A real watch-only app never does. This is the fastest disqualifier.
• Does it ask you to deposit funds? If coins move to an address the app controls, it is custodial.
• Does it require an account with KYC? Public-address tracking needs no identity and no login. A mandatory identity check means a database that can leak.
• What does it actually store? Prefer apps that keep your address list on your device rather than tying it to a server-side account.
• Can it function offline for sensitive steps? Tools that let you handle key material or conversions offline keep secrets off the network entirely.
• Is the pricing honest? A single, clearly stated purchase is easier to trust than a model that quietly monetizes your data.

If an app clears every item on this list, it can watch your coins without ever being able to take them.

How QbyteLab's Crypto AI Agent Fits

QbyteLab builds mobile tools around a plain rule: no custody of funds and no key handling, ever. The Crypto AI Agent is built as a read-only tracker. You add public addresses, and it shows balances, live prices, and a full portfolio, with price alerts and exportable reports layered on top. It never asks for a private key, it holds no coins, and it does not run a custodial account you could be locked out of.

That design reflects the whole point of this article. The safest way to watch your crypto is with a tool that can only look. Because the Crypto AI Agent reads public data and does the math on live market prices, you get the convenience of a dashboard without inheriting the risks of custody covered above.

If you want to track prices and a portfolio without handing anyone your keys, start by moving your coins into self-custody, then add your public addresses to a genuine watch-only tracker like the QbyteLab Crypto AI Agent and set the price alerts that matter to you.

Frequently asked questions

What does no custody mean in a crypto app?

It means the app never holds your private keys or your coins. It reads public blockchain data to display balances and prices, so it can watch your funds but can never move them.

Can an app track my portfolio without my private keys?

Yes. Balances and transaction history are public on the blockchain. A watch-only app needs only your public address to show holdings, and a public address cannot be used to spend funds.

Is a watch-only crypto tracker safe?

A watch-only tracker that requests only public addresses cannot spend your coins, because moving funds requires the private key it never sees. The main risk is privacy, since the app can see which addresses you enter.

How do I check if a crypto app is non-custodial?

Confirm it asks only for public addresses and never for a private key, seed phrase, or exchange login. If it requests deposits or credentials, it is custodial or account-linked, not watch-only.